Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lYJVqms-h2koMnKllWW5fp_ijLU.roa
File: lYJVqms-h2koMnKllWW5fp_ijLU.roa (raw, json)
Hash identifier: 2nYtZ8l4aMVX5tXqWF6oLF+dbKop/Q7He80tQfonCVc=
Subject key identifier: 95:82:55:AA:6B:3E:87:69:28:32:72:A5:95:65:B9:7E:9F:E2:8C:B5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018EB2E4AA6C263A5A324ABBC5C20257E5A8
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lYJVqms-h2koMnKllWW5fp_ijLU.roa
Signing time: Sat 06 Apr 2024 10:11:54 +0000
ROA not before: Sat 06 Apr 2024 10:11:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b2:e4:aa:6c:26:3a:5a:32:4a:bb:c5:c2:02:57:e5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 6 10:11:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=958255aa6b3e8769283272a59565b97e9fe28cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fd:bc:b4:fc:01:7b:b0:b4:c4:a1:d1:b2:d5:
d6:08:a0:0f:fa:fe:23:d7:09:fd:c3:a7:89:e3:a8:
88:84:ee:98:28:0c:29:3b:4a:68:95:3e:0e:1a:7a:
a6:60:ff:ba:58:0b:44:70:13:79:67:d0:79:ae:15:
b7:90:d9:f7:fa:74:71:c5:82:7c:b7:4d:71:24:13:
f6:fc:ea:92:d6:f4:60:a9:57:f8:fe:49:1c:7d:12:
91:c1:68:8f:09:01:30:03:af:cc:1a:d3:0d:e9:84:
a0:e6:d4:f1:f6:f8:17:e8:bc:7a:63:ba:6f:36:ed:
a0:fd:b7:fa:00:79:07:0c:40:3d:6f:ad:de:b1:a8:
d9:5f:f3:74:f0:39:db:8b:ae:82:94:15:f2:9f:e8:
a9:75:dd:bc:87:52:0f:61:78:cf:94:05:4a:e5:a3:
77:02:9f:59:f9:7d:8e:e8:11:17:a2:24:40:b4:ce:
6f:c8:5d:76:08:b2:98:fa:aa:8d:8c:99:d9:6f:f6:
cb:7c:09:3a:eb:5d:93:47:68:26:51:72:11:44:11:
41:70:a1:2d:09:83:58:3a:e6:3a:12:64:1d:82:28:
1f:20:50:ef:41:a2:63:ec:d5:d9:6a:1a:a7:d8:bc:
1c:91:55:0d:ef:ed:2f:00:44:0d:c4:a1:e6:00:38:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:82:55:AA:6B:3E:87:69:28:32:72:A5:95:65:B9:7E:9F:E2:8C:B5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/lYJVqms-h2koMnKllWW5fp_ijLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:a0:01:8d:84:81:a8:2d:96:d2:09:3a:6e:2a:1c:a1:c4:5a:
52:31:cf:56:f1:59:9a:bf:e6:96:6e:7a:8f:e8:6f:cd:4b:20:
ff:1a:4a:85:fd:4d:78:6a:87:9f:51:f5:ec:36:7e:7f:d3:33:
91:0b:aa:a4:c5:3b:6b:c5:c0:16:56:67:87:05:d7:fb:71:94:
34:af:bc:88:96:5c:54:cd:66:b8:0c:ee:7b:55:5a:14:bc:3a:
33:0a:e8:81:76:d3:72:c2:b6:32:ab:d3:1d:74:ba:31:65:51:
1d:a6:85:87:bd:82:6a:97:98:bd:38:24:bc:15:27:1c:72:a0:
cb:9b:36:4a:8c:43:da:51:a0:58:c5:24:7d:1b:0f:34:5e:a7:
40:1a:ef:d1:6b:4c:9c:81:e5:ec:cc:42:c4:50:0b:9c:b7:9b:
7b:73:6d:49:d1:15:93:0f:ab:4b:09:f1:cf:55:cd:43:f2:00:
91:d7:b1:aa:ce:be:0d:ec:24:23:2d:b3:50:0d:91:d6:15:28:
3e:65:b1:5f:0b:70:a7:61:f4:f4:8e:e3:8d:09:6a:d7:13:c2:
fd:80:87:0e:0c:ed:28:39:6c:99:a4:8b:44:80:c7:d2:11:0b:
44:2f:fd:d2:96:1d:fb:69:31:16:1d:82:fb:8c:20:b2:36:cf:
01:4e:80:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:57:54 2025 by rpki-client